n8n Vulnerability Advisory Catalog

Total 122 security vulnerabilities recorded for n8n software and firmware.

← Back to All Vendors
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.6.4 and 1.123.23, an authenticated user without permission to list external se...

šŸ“… 2026-03-25
CVSS 5.3 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to version 2.8.0, when the `N8N_SKIP_AUTH_ON_OAUTH_CALLBACK` environment variable is set to ...

šŸ“… 2026-03-25
CVSS 4.2 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.26, an authenticated user with permission to create or...

šŸ“… 2026-03-25
CVSS 8.8 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.27, an authenticated user with permission to create or...

šŸ“… 2026-03-25
CVSS 8.8 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.4.0 and 1.121.0, when LDAP authentication is enabled, n8n automatically linked...

šŸ“… 2026-03-25
CVSS 7.5 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.27, an authenticated user with the `global:member` rol...

šŸ“… 2026-03-25
CVSS 6.5 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.14.1, 2.13.3, and 1.123.26, an authenticated user with permission to create or...

šŸ“… 2026-03-25
CVSS 8.8 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 1.123.22, 2.9.3, and 2.10.1, an authenticated user with permission to create or ...

šŸ“… 2026-03-25
CVSS 6.5 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or ...

šŸ“… 2026-02-25
CVSS 5.4 Dossier →
CVE-2026-27577 CRITICAL
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, additional exploits in the expression evaluation of...

šŸ“… 2026-02-25
CVSS 9.9 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.2.0 and 1.123.8, an authenticated user with permission to create or modify wor...

šŸ“… 2026-02-25
CVSS 8.8 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or ...

šŸ“… 2026-02-25
CVSS 8.8 Dossier →
CVE-2026-27495 CRITICAL
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or ...

šŸ“… 2026-02-25
CVSS 9.9 Dossier →
CVE-2026-27494 CRITICAL
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or ...

šŸ“… 2026-02-25
CVSS 9.9 Dossier →
CVE-2026-27493 CRITICAL
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, a second-order expression injection vulnerability e...

šŸ“… 2026-02-25
CVSS 9.0 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to 1.121.0, there is a vulnerability in the HTTP Request node's credential domain validation...

šŸ“… 2026-02-06
CVSS 6.5 Dossier →
Component: n8n

n8n is an open source workflow automation platform. From version 0.187.0 to before 1.120.3, a command injection vulnerability was identified in n8n’s ...

šŸ“… 2026-02-04
CVSS 7.2 Dossier →
CVE-2026-25115 CRITICAL
Component: n8n

n8n is an open source workflow automation platform. Prior to version 2.4.8, a vulnerability in the Python Code node allows authenticated users to brea...

šŸ“… 2026-02-04
CVSS 9.9 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 1.118.0 and 2.4.0, a vulnerability in the Merge node's SQL Query mode allowed au...

šŸ“… 2026-02-04
CVSS 8.8 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 1.123.12 and 2.4.0, when workflows process uploaded files and transfer them to r...

šŸ“… 2026-02-04
CVSS 8.1 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 1.123.9 and 2.2.1, a Cross-Site Scripting (XSS) vulnerability existed in a markd...

šŸ“… 2026-02-04
CVSS 5.4 Dossier →
CVE-2026-25053 CRITICAL
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 1.123.10 and 2.5.0, vulnerabilities in the Git node allowed authenticated users ...

šŸ“… 2026-02-04
CVSS 9.9 Dossier →
CVE-2026-25052 CRITICAL
Component: n8n

n8n is an open source workflow automation platform. Prior to versions 1.123.18 and 2.5.0, a vulnerability in the file access controls allows authentic...

šŸ“… 2026-02-04
CVSS 9.9 Dossier →
Component: n8n

n8n is an open source workflow automation platform. Prior to version 1.123.2, a Cross-Site Scripting (XSS) vulnerability has been identified in the ha...

šŸ“… 2026-02-04
CVSS 5.4 Dossier →
Page 4 of 6 (122 Total Records)